CVE-2012-5322

This exploit demonstrates a cross-site scripting (XSS) vulnerability in the Xavi 7968 ADSL Router. The PoC injects arbitrary JavaScript code via the 'host_name_txtbox' parameter, which executes in the context of the vulnerable site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in the Xavi 7968 ADSL Router. The PoC URL injects arbitrary JavaScript code into the 'context' parameter, which executes in the context of the vulnerable site, potentially stealing cookie-based authentication credentials.